$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa File: 6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json) Hash identifier: amtsGIZ1bAiDpg3BaPYjx1lqeDVrGcipi92mNwNuQSE= Subject key identifier: B8:9D:38:FC:BA:F0:A7:5F:3F:00:A2:48:D6:77:A4:8A:E7:C2:0C:E1 Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 026C Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:00:06 +0000 ROA not before: Thu 14 Aug 2025 21:31:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140917 IP address blocks: 103.153.110.0/23 maxlen: 23 103.153.110.0/24 maxlen: 24 103.153.111.0/24 maxlen: 24 2001:df4:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 14 21:31:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48cb6-93a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:28:9f:88:69:ae:0c:38:c9:bf:ca:a0:c8: d2:57:64:f1:00:18:2b:a1:bf:ec:21:fe:d4:bf:25: 7b:91:af:63:35:dc:63:5e:33:f9:a5:88:06:04:28: ff:70:3b:c7:47:27:3c:10:a4:29:8f:c9:62:01:38: b3:09:0f:ad:43:2a:ee:f4:c8:38:9f:cf:7d:ad:74: f5:b0:7d:08:a9:ae:a1:78:c8:90:72:32:30:45:15: 54:36:2b:e0:b3:3b:70:90:ab:72:9f:ba:d0:0a:e4: fd:32:98:27:e0:ab:fc:38:85:ba:b9:a4:8e:6a:75: 1e:69:f5:e3:1c:96:ff:d4:e5:3c:a7:e9:7c:e8:02: a8:0d:d7:c1:89:bf:84:b1:a3:70:2d:1a:bd:54:d3: 76:83:aa:99:84:ff:58:bd:09:17:3b:b4:1d:58:82: 5b:b3:ac:df:de:c1:39:18:ac:6d:fa:02:f8:e0:49: 5f:f9:fc:0e:09:fe:3f:10:cb:ef:f2:e6:55:aa:9b: 68:c8:c0:f0:a5:c0:15:27:56:06:a0:f8:19:2c:2d: bc:ca:72:ac:b7:23:c1:54:e3:47:a7:85:bd:95:09: 06:cb:17:d0:b4:83:5b:1b:51:4e:34:83:dc:6d:3a: 4c:84:8f:c5:95:bb:0d:da:4e:16:a6:19:15:8d:7a: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:38:FC:BA:F0:A7:5F:3F:00:A2:48:D6:77:A4:8A:E7:C2:0C:E1 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.110.0/23 IPv6: 2001:df4:4180::/48 Signature Algorithm: sha256WithRSAEncryption 3f:b0:d1:0e:af:9b:39:11:01:99:0d:d5:18:42:6e:a4:92:c3: 36:a9:8a:3f:cd:86:4a:ed:43:b7:53:06:f6:97:b0:f6:10:b7: ba:b5:57:4f:41:6c:04:93:b7:c6:55:62:ca:fc:a1:ce:05:42: 21:1d:45:92:57:66:d3:8c:1c:3f:61:2f:3c:f6:f5:76:b3:da: 8a:70:a4:71:15:c3:a7:29:ac:a6:9a:67:67:d9:bb:4e:d1:a8: 98:6f:31:1f:f4:72:05:16:e9:d5:d1:ee:8a:83:39:10:6d:fd: 1a:8f:cc:e1:34:ae:77:89:ac:d9:ea:7a:cf:15:2e:15:71:41: 0f:01:81:5a:d8:1d:cd:d9:3b:47:93:c3:62:ca:f6:7c:3e:b4: 30:11:16:7c:09:21:9e:b1:99:25:d3:e7:86:11:99:dc:85:71: 17:de:1e:37:9f:6e:84:96:98:fa:c8:c5:e4:6e:b6:af:32:eb: 75:c5:9f:b6:3b:3f:2e:fa:58:80:74:70:33:8a:56:7b:54:c4: 2b:f6:7e:54:cf:6f:3c:dc:5f:85:3c:d6:72:8b:14:7f:f6:15: 56:f2:20:f4:f5:15:26:34:ec:0d:08:16:f8:23:a4:30:95:30: e0:05:88:7a:b1:07:5f:f7:67:21:a3:f9:86:64:d4:d7:1c:4b: b9:f0:16:75 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwODE0MjEzMTU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNiNi05M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0kon4hprgw4yb/KoMjSV2TxABgrob/sIf7UvyV7ka9jNdxjXjP5pYgGBCj/ cDvHRyc8EKQpj8liATizCQ+tQyru9Mg4n899rXT1sH0Iqa6heMiQcjIwRRVUNivg sztwkKtyn7rQCuT9Mpgn4Kv8OIW6uaSOanUeafXjHJb/1OU8p+l86AKoDdfBib+E saNwLRq9VNN2g6qZhP9YvQkXO7QdWIJbs6zf3sE5GKxt+gL44Elf+fwOCf4/EMvv 8uZVqptoyMDwpcAVJ1YGoPgZLC28ynKstyPBVONHp4W9lQkGyxfQtINbG1FONIPc bTpMhI/FlbsN2k4WphkVjXrnfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLidOPy6 8KdfPwCiSNZ3pIrnwgzhMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwQUUvMzdFQjBDNjZDOTY0MTFFQUExMDZFODU5QzRGOUFFMDIvNjg5NzA5N0U2 QzYzMTFFREJDRkEwNzNGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5luMA8EAgACMAkDBwAgAQ30QYAwDQYJKoZIhvcNAQELBQADggEB AD+w0Q6vmzkRAZkN1RhCbqSSwzapij/NhkrtQ7dTBvaXsPYQt7q1V09BbASTt8ZV Ysr8oc4FQiEdRZJXZtOMHD9hLzz29Xaz2opwpHEVw6cprKaaZ2fZu07RqJhvMR/0 cgUW6dXR7oqDORBt/RqPzOE0rneJrNnqes8VLhVxQQ8BgVrYHc3ZO0eTw2LK9nw+ tDARFnwJIZ6xmSXT54YRmdyFcRfeHjefboSWmPrIxeRutq8y63XFn7Y7Py76WIB0 cDOKVntUxCv2flTPbzzcX4U81nKLFH/2FVbyIPT1FSY07A0IFvgjpDCVMOAFiHqx B1/3ZyGj+YZk1NccS7nwFnU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:29:55 2026 by rpki-client